home

Giner Tech Inc

Publisher Information

Giner Tech Inc is a software publisher located in Wilmington, Delaware in the United States*. The company is a primary distributor of unwanted software. Thre are 20 additional code signing certificates issued to this publisher.
Authority:
GlobalSign nv-sa

Valid from:
12/1/2014 5:23:38 AM

Valid to:
12/2/2015 5:23:38 AM

Subject:
CN=Giner Tech Inc, O=Giner Tech Inc, L=Wilmington, S=Delaware, C=US

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112199db8c96b8094d068eb2a83a0074bf32

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Service.Thinknice, PUP.Thinknice, PUP.BHO.Thinknice, PUP.Thinknice.GinerTech (M), PUP.Thinknice (M)
100.00%

G Data
Adware.SearchProtect, Win32.Application.SubTab, Win32.Adware.SupTab, Win32.Application.SearchProtect.AA@gen
56.25%

Baidu Antivirus
PUA.Win32.ELEX, Adware.Win32.Elex
50.00%

Malwarebytes
PUP.Optional.XTab.A, PUP.Optional.XTabs.A, PUP.Optional.BrowserWatch, PUP.Optional.SupTab.A, PUP.Optional.ELEX
43.75%

K7 AntiVirus
Trojan , Riskware , Unwanted-Program
43.75%

Vba32 AntiVirus
AdWare.SearchProtect, suspected of Trojan.Downloader.gen.h
43.75%

ESET NOD32
Win32/ELEX.BM potentially unwanted, Win32/ELEX.BM potentially unwanted (variant)
43.75%

Dr.Web
Adware.Mutabaha.119, Adware.Mutabaha.117, Adware.Mutabaha.121, Adware.Mutabaha.120
37.50%

Zillya! Antivirus
Adware.SearchProtect.Win32.20, Adware.SearchProtect.Win32.14, Adware.SearchProtect.Win32.21, Adware.SearchProtect.Win32.22
25.00%

Avira AntiVirus
PUA/SearchProtect.EH, PUA/Subtab.Gen, TR/Trash.Gen
25.00%

1 / 68      (Adware)
protectservice.exe (XTab by XTab system)  (9f5fb4d152c29ae52df7d617ee88885e)

1 / 68      (Adware)
xtab_v4.0.exe (XTab)  (4cbb66302e4a0e0ebf2f1c60c2778068)

1 / 68      (Adware)
xtab_v4.0.exe (XTab)  (d2158c241d62db9f995fefe4d90a901c)

1 / 68      (Adware)
protectservice.exe (XTab by XTab system)  (eda79891b3c8a4b8e637f5c7e4764989)

1 / 68      (Adware)
vd2_v0b3007.exe  (1c9367ad41e246bda26f6aebd78cfbe6)

1 / 68      (Adware)
jhnew.dll  (7638963b1a5c969a9648183ddc7dda5b)

1 / 68      (Adware)
vd2_v0b4001.exe  (0f73a8df49d3637a3320d30fc37f108b)

10 / 68    (Adware)
browerwatchff.dll (XTab)  (14c94f2880ad8654b4b7688ef9a36b7a)

10 / 68    (Adware)
browerwatchch.dll (XTab)  (cce8d8b33d8271045ee8adfc305b7fa9)

9 / 68      (Adware)
IeWatchDog.dll (SearchProtect by Search Protecter)  (f2c26c8a0bb5ab7afe8886530eca34d1)

11 / 68    (Adware)
hpnotify.exe (XTab by XTab system)  (0fff3d6365fe3e5d9aa47a2369eb9ace)

16 / 68    (Adware)
CmdShell.exe (SearchProtect)  (bca85fb430d42daa64251fcc7fe0e4e6)

6 / 68      (Adware)
suptab.dll (SupTab by Thinknice Co. Limited)  (429bfea50cb9902d05e156bcd3fc6798)

21 / 68    (Adware)
xtab_v4.0.exe (XTab)  (ab5ef850169b67afe19637fd7b6ed049)

7 / 68      (Adware)
stab_down.exe (STab by STab_Down)  (de7cb53db6ef2818b023ff8379799c2f)

20 / 68    (Adware)
protectservice.exe (XTab by XTab system)  (03b3ab64fe8d2627fdab1f79422a722f)

The certificates below are also signed by Giner Tech Inc.

112186B135D0152CD8EA8D04B67D2A0CCF34  (Apr 20, 2015 to Dec 02, 2015)

1121B74BA60A169786D0CAC560764F7FC03A  (Nov 27, 2015 to Dec 02, 2015)

1121E3C052D28186E7A3A2F0C0E1C9DB0E0A  (Sep 09, 2015 to Dec 02, 2015)

1121FB793B677F1D12C7BCC7B71B945F3810  (Jun 12, 2015 to Dec 02, 2015)

112106B3EDF5DE21FE5DD0E0F44EB00F51DB  (Oct 19, 2015 to Dec 02, 2015)

112133A773ED10A66141A4E8D415A28B33BC  (Nov 25, 2015 to Dec 02, 2015)

112167537F02B71858D5AA3FC5D6CBB4265C  (Mar 24, 2015 to Dec 02, 2015)

1121B41D053551CB1F7FDDDC1D9FB5BA07B3  (Oct 08, 2015 to Dec 02, 2015)

1121FF4B793B23CE59EA22F72C1A6C3394D7  (Nov 30, 2015 to Dec 02, 2015)

11211E09603B593D245602D9201DA71AC837  (Oct 26, 2015 to Dec 02, 2015)

10 of 20 code signing certificates issued

The following publishers (by Authenticode signature organization name) are related.

Yuxin WANG

Minidigital Technology Co., Limited

Skytouch Technology Co., Limited

* Note, the details and description above are based on the code signing digital signature issued to Giner Tech Inc by GlobalSign nv-sa on December 01, 2014 with the serial number '112199db8c96b8094d068eb2a83a0074bf32'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.